VERY IMPORTANT

WoofLocker is being distributed via a limited number of compromised websites. The threat actor appears to have gained access to two categories: non adult traffic and adult traffic. That distinction can be seen in the unique redirection URL created for each victim with a parameter called "nad" and "ad" respectively.